Calendar Sync requests read-only access to the Google Calendar of the person who connects it. It stores upcoming calendar entries for that person's own use and nothing else. Access tokens are stored encrypted. No data is shared with anyone or used for any other purpose.
You can revoke access at any time at myaccount.google.com/permissions; stored entries are removed on the next sync.